Hello, I’m Thibault.

I talk to computers to make them work

I work on privacy, Internet protocols, and small pieces of software. This is where I share what I build, what I learn, and things from elsewhere that feel worth keeping.

Recent notes

  1. Probing the MCP registry for anonymous access

    What 10,950 remote MCP endpoints reveal about authentication and openness in the ecosystem

  2. Moving past bots vs. humans

    Cloudflare

    Why intent and behaviour matter more than the increasingly blurry distinction between people and automation

  3. quicvarint: variable-length integers in TypeScript

    Encoding variable-length integers in TypeScript

  4. Beyond IP lists: a registry format for bots and agents

    Cloudflare · with Maxime Guerreiro

    A discovery mechanism for the public keys used by bots and agents

  5. Anonymous credentials: rate-limiting bots and agents without compromising privacy

    Cloudflare · with Christopher Patton, Lena Heimberger, and Armando Faz-Hernández

    Using anonymous credentials to rate-limit automated traffic without turning identity into a tracking mechanism

Things I’m working on

IETF

Privacy Pass, bot authentication, and standards for a more interoperable Internet.

ohttp.info

An illustrated guide to hiding a client’s identity from the server it contacts.

dee

A small command-line tool for public randomness and time-lock encryption.

Found lately

  1. Brave Accounts: your password never leaves your device, ever. | Brave Security
  2. The Move to Python 3 Begins! | EVE Online Programming
  3. Surya Narreddi Ai
  4. The end of IPFS at Shipyard Distributed-Systems
  5. Strange.Website Web